Lucene search
K

11 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerabilities have been resolved: tpm2-sessions: Fixed out-of-range indexing in namesize. The namesize field does not have any range checks; it simply indexes using TPMALGID. This could lead to memory corruption in extreme cases. The issue is addressed by only...

5.8AI score0.0004EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/15 12:24 a.m.1 views

CVE-2025-68792

An out-of-bounds array indexing flaw was found in the Linux kernel's TPM2 session handling code. The namesize lookup function uses TPMALGID values directly as array indices without bounds checking. An unrecognized algorithm ID could cause out-of-bounds memory access, potentially leading to memory...

5.5CVSS5.4AI score0.0004EPSS
Exploits0References4
NVD
NVD
added 2026/01/13 4:16 p.m.2 views

CVE-2025-68792

In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...

0.0004EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/01/13 4:16 p.m.2 views

CVE-2025-68792

In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...

5.8AI score0.0004EPSS
Exploits0References10
OSV
OSV
added 2026/01/13 4:16 p.m.0 views

UBUNTU-CVE-2025-68792

In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...

5.7AI score0.0004EPSS
Exploits0References11
OSV
OSV
added 2026/01/13 3:29 p.m.1 views

CVE-2025-68792 tpm2-sessions: Fix out of range indexing in name_size

In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...

6.5AI score0.0004EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/01/13 3:29 p.m.2 views

CVE-2025-68792

In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...

5.2AI score0.0004EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-68792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range...

5.7AI score0.0004EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/30 12:0 a.m.1 views

PT-2026-2524

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the tpm2-sessions component where the name size variable lacks range checks. This could allow for out-of-range indexing, potentially leading to memory...

5.5CVSS5.3AI score0.0004EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/06/09 12:0 a.m.1 views

PT-2025-24545 · Lablup · Lablup'S Backendai

Name of the Vulnerable Software and Affected Versions: Lablup's BackendAI affected versions not specified Description: The issue is related to missing authorization in Lablup's BackendAI, allowing attackers to take over all active sessions. This enables them to access, steal, or alter any data...

8.1CVSS5.9AI score0.00261EPSS
Exploits0References8
OSV
OSV
added 2019/08/06 7:15 p.m.13 views

CVE-2019-2386

After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones. This issue affects MongoDB Server v4.0 versions prior to 4.0.9;...

7.1CVSS6.9AI score
Exploits0References2
Rows per page
Query Builder